~lightdm-team/lightdm/1.20 : changes

~lightdm-team/lightdm/1.20 » Changes from revision 2414

From Revision 2414 to 2395

Rev	Summary	Authors	Tags	Date
2414	* SECURITY UPDATE: Guest session not confined (LP: #1663157) * SECURITY UPDATE: Guest session not confined (LP: #1663157) - debian/50-disable-guest.conf: - debian/lightdm.install: - Disable guest sessions by default, this can be overridden by custom configuration (e.g. /etc/lightdm/lightdm.conf) - CVE-2017-8900	Robert Ancell		6 years ago
2413	Update debian/changelog Update debian/changelog	Robert Ancell		7 years ago
2412	Detect existing malicious guest user home dirs Detect existing malicious guest user home dirs It was discovered that a local attacker could watch for lightdm's guest-account script to create a /tmp/guest-XXXXXX file and then quickly create the lowercase representation of the guest user's home directory before lightdm could. This allowed the attacker to have control of the guest user's home directory and, subsequently, gain control of an arbitrary directory in the filesystem which could lead to privilege escalation. This patch fixes the issue by detecting failures in creating a directory for the guest user's home directory. If the file (directory, symlink, etc.) already exists at the path, mkdir will fail and the script will exit. This means that it is still possible for a local user to carry out a denial of service on the guest user login feature.	Tyler Hicks		7 years ago
2411	Fix logic that checked if a session was being stopped Fix logic that checked if a session was being stopped	Robert Ancell		7 years ago
2410	Use power management functions from ConsoleKit2 if available... Use power management functions from ConsoleKit2 if available. Suspend and hibernate functionality was removed from upower 0.99.0, so systems not using systemd had now suspend/hibernate functionality. Support for this was added into ConsoleKit2. Most systems will either be systemd or ConsoleKit2 now, so we try the following: 1. Power management in logind 2. Power management in ConsoleKit 3. upower for suspend/resume (really only here to not break backwards compatibility) Based on a patch for Gentoo by Fitzcarraldo.	Robert Ancell		7 years ago
2409	Use liblightdm-gobject power methods instead of re-implement... Use liblightdm-gobject power methods instead of re-implementing in Qt, only run power fallback tests once	Robert Ancell		7 years ago
2408	Fix incorrect unref in XDMCP code Fix incorrect unref in XDMCP code	Robert Ancell		7 years ago
2407	Use SA_RESTART on signals so we don't get interrupted reads Use SA_RESTART on signals so we don't get interrupted reads	Robert Ancell		7 years ago
2406	Re-enable SIGPIPE for children so they have default behaviou... Re-enable SIGPIPE for children so they have default behaviour	Robert Ancell		7 years ago
2405	Releasing 1.20.0 Releasing 1.20.0	Robert Ancell	1.20.0	7 years ago
2404	Launchpad automatic translations update. Launchpad automatic translations update.	Launchpad Translatio...		7 years ago
2403	Releasing 1.19.5 Releasing 1.19.5	Robert Ancell	1.19.5	7 years ago
2402	Revert r2392 - it seems to have broken ABI in liblightdm-gob... Revert r2392 - it seems to have broken ABI in liblightdm-gobject	Robert Ancell		7 years ago
2401	Revert the bogus .deps file changes and fix the clean rules Revert the bogus .deps file changes and fix the clean rules	Robert Ancell		7 years ago
2400	Allow guest sessions more access to the upstart session sock... Allow guest sessions more access to the upstart session socket	Robert Ancell		7 years ago
2399	Don't show guest session dialog in MATE Don't show guest session dialog in MATE	Robert Ancell		7 years ago
2398	Launchpad automatic translations update. Launchpad automatic translations update.	Launchpad Translatio...		7 years ago
2397	Tidy up LightDMGreeterError documentation - still not sure w... Tidy up LightDMGreeterError documentation - still not sure why it doesn't show in GTK-Doc	Robert Ancell		7 years ago
2396	Distribute .deps file correctly Distribute .deps file correctly	Robert Ancell		7 years ago
2395	More documentation More documentation	Robert Ancell		7 years ago

Older »